Systems, methods, and devices for secure blockchain transaction and subnetworks

Abstract

Provided herein is a system, device, method, and subnetwork for performing a secure blockchain transaction of a digital asset. The system includes a terminal for generating the blockchain transaction, the terminal configured to operate in a first mode and a second mode, and a switch connector for preventing the terminal from operating in the first mode and the second mode simultaneously. When the terminal is in the first mode, the terminal is connected via a network to a system provider server, the system provider server in communication with a plurality of blockchain devices. When the terminal is in the second mode, the terminal is in communication with a cold storage device. The cold storage device is configured to store a private key for signing the blockchain transaction. The terminal is configured to sign the blockchain transaction on the cold storage device using the private key.

The invention claimed is: 
     
       1. A system for performing a secure blockchain transaction, the system comprising:
 a terminal for generating the blockchain transaction, the terminal configured to operate in a first mode and a second mode; and 
 a switch connector for preventing the terminal from operating in the first mode and the second mode simultaneously; 
 wherein, when the terminal is in the first mode, the terminal is connected via a network to a system provider server, the system provider server in communication with at least one blockchain device; 
 wherein, when the terminal is in the second mode, the terminal is in communication with a cold storage device; 
 wherein the cold storage device is configured to store a private key for signing the blockchain transaction; 
 wherein the terminal is configured to allow the blockchain transaction to be signed on the cold storage device using the private key; 
 wherein each of a user of the terminal, a system provider providing the system provider server, and a service provider store a fragment of back-up information for backing up private blockchain information; 
 wherein the private blockchain information is recoverable only when at least two fragments of the back-up information are provided. 
 
     
     
       2. The system of  claim 1 , wherein the switch connector comprises a hardware switch. 
     
     
       3. The system of  claim 1 , wherein the switch connector comprises a software switch. 
     
     
       4. The system of  claim 1 , wherein the blockchain transaction is signed by at least two parties prior to sending the signed blockchain transaction to the at least one blockchain device. 
     
     
       5. The system of  claim 4 , wherein the at least one other party includes the system provider. 
     
     
       6. The system of  claim 1 , wherein the system provider server is in communication with at least one service provider device. 
     
     
       7. The system of  claim 1 , wherein the back-up information is a key. 
     
     
       8. The system of  claim 1 , wherein the private blockchain information includes the private key. 
     
     
       9. A terminal for performing a secure blockchain transaction, the terminal comprising:
 a processor for generating an unsigned blockchain transaction; 
 a cold storage communication port for transmitting the unsigned blockchain transaction to a cold storage device, wherein the cold storage device stores a private key for signing the unsigned blockchain transaction, and wherein the terminal receives a signed blockchain transaction from the cold storage device; 
 a network communication port for transmitting the signed blockchain transaction to a system provider server over a network, wherein the system provider server is in communication with at least one blockchain device; 
 a switch connector for selectively disabling either the cold storage communication port or the network communication port such that the private key is not exposed to the network; 
 wherein each of a user of the terminal, a system provider providing the system provider server, and a service provider store a fragment of back-up information for backing up private blockchain information; 
 wherein the private blockchain information is recoverable only when at least two fragments of the back-up information are provided. 
 
     
     
       10. The terminal of  claim 9 , wherein the switch connector comprises a hardware switch. 
     
     
       11. The terminal of  claim 9 , wherein the switch connector comprises a software switch. 
     
     
       12. The terminal of  claim 9  further configured to restrict inbound and outbound communication with the system provider server. 
     
     
       13. A cold storage device for performing a secure blockchain transaction of a digital asset over a network, the cold storage device comprising:
 a memory storing a private key of at least one cold storage wallet, the private key for signing an unsigned blockchain transaction; 
 a communication interface for receiving an unsigned blockchain transaction from a terminal, the terminal disconnected from the network; and wherein the communication interface transmits a signed blockchain transaction to the terminal, the terminal disconnected from the network; 
 a connection to a processor configured to sign the unsigned blockchain transaction using the private key; 
 wherein each of a user of the terminal, a system provider, and a service provider store a fragment of back-up information for backing up private blockchain information; 
 wherein the private blockchain information is recoverable only when at least two fragments of the back-up information are provided. 
 
     
     
       14. The device of  claim 13 , wherein the communication interface uses at least one communication mechanism selected from the group consisting of encrypted Bluetooth, near-field communication, Wi-Fi, optical communication, wired communication, and thermal emission. 
     
     
       15. The device of  claim 13 , wherein the processor is further configured to generate a key pair of the at least one cold storage wallet. 
     
     
       16. The device of  claim 15 , wherein the at least one cold storage wallet is a hierarchical deterministic wallet. 
     
     
       17. A method of performing a secure blockchain transaction over a communication network, the method comprising:
 generating an unsigned blockchain transaction using a terminal, the terminal having an online mode and an offline mode; 
 transmitting, in the offline mode, the unsigned blockchain transaction from the terminal to a cold storage device, the cold storage device storing a private key for signing the unsigned blockchain transaction; 
 signing the unsigned blockchain transaction on the cold storage device using the private key; 
 transmitting the signed blockchain transaction from the cold storage device to the terminal; 
 switching the terminal from the offline mode to the online mode; 
 transmitting the signed blockchain transaction from the terminal to a system provider server via the communication network while in the online mode, the system provider server in communication with a plurality of blockchain computers; 
 wherein each of a user of the terminal, a system provider providing the system provider server, and a service provider store a fragment of back-up information for backing up private blockchain information; 
 wherein the private blockchain information is recoverable only when at least two fragments of the back-up information are provided. 
 
     
     
       18. The method of  claim 17 , further comprising signing the transmitted signed transaction with a second private key according to a multi-signature authentication process. 
     
     
       19. The method of  claim 18 , wherein signing the transmitted signed transaction is performed on the system provider server. 
     
     
       20. The method of  claim 17 , wherein the switching is performed using a switch connector. 
     
     
       21. The method of  claim 20 , wherein the switch connector is a hardware switch connector. 
     
     
       22. The method of  claim 20 , wherein the switch connector is a software switch connector.